Press "Enter" to skip to content

NATting over a single interface?

Last updated on December 25, 2018

        I want to apply static NAT to highlighted servers on the KLRTR router but the issue is the interface s0/0/0 has sub-interface (S0/0/0.203) of frame relay on it. So I applied the NAT on the sub-interface on S0/0/0.203 but then the sub-interface s0/0/0.203 already has an IP assigned (NAT IP is different from the IP between KL_ISP and KLRTR) to it so it didnt work as NAT translations worked but the sender doesn't get a ping response.
In simulation mode mode the packets fail at KL_ISP, not sure why even though I have static route set on KL_ISP to enter the network and other devices are able to ping. If I ping from Internet Web Server to DHCP server on its inside local IP, the ping is successful but fails on pinging on the outside global IP. I applied IP address to S0/0/0 and then I applied NAT on it which didnt work either. Is there any other way to solve this issue. enter image description here Thank You KLRTR Config:
KLRTR#sh run
Building configuration...

Current configuration : 2077 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname KLRTR
!
enable secret 5 $1$mERr$hx5rVt7rPNoS4wqbXKX7m0
!
ip dhcp excluded-address 10.11.2.1 10.11.2.3
!
ip dhcp pool VLANSalesOnly
 network 10.11.2.0 255.255.255.0
 default-router 10.11.2.1
 dns-server 10.11.5.11
!
no ip cef
no ipv6 cef
!
username KLISP password 7 0822455D0A16
!
no ip domain-lookup
!
spanning-tree mode pvst
!
interface FastEthernet0/0
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface FastEthernet0/1
 no ip address
 duplex auto
 speed auto
!
interface FastEthernet0/1.19
 description Subinterface for VLAN 19 WLAN for security group
 encapsulation dot1Q 19
 ip address 10.11.4.225 255.255.255.248
!
interface FastEthernet0/1.188
 description Subinterface for VLAN 188 SalesOnly group
 encapsulation dot1Q 188
 ip address 10.11.2.1 255.255.255.0
!
interface FastEthernet0/1.199
 description Subinterface for VLAN 199 switch Management
 encapsulation dot1Q 199
 ip address 10.11.4.201 255.255.255.248
!
interface Serial0/0/0
 ip address 172.168.0.10 255.255.0.0 *ADDED FOR TESTING PURPOSE ONLY
 encapsulation frame-relay
 ip nat inside
!
interface Serial0/0/0.201 point-to-point
 ip address 10.11.4.250 255.255.255.252
 frame-relay interface-dlci 201
 clock rate 2000000
!
interface Serial0/0/0.203 point-to-point
 ip address 10.11.4.253 255.255.255.252
 frame-relay interface-dlci 203
 clock rate 2000000
!
interface Serial0/0/1
 ip address 195.9.16.18 255.255.255.252
 encapsulation ppp
 ppp authentication chap
 ip nat outside
!
interface Vlan1
 no ip address
 shutdown
!
router eigrp 1
 redistribute static 
 network 10.0.0.0
 network 195.9.16.0
 no auto-summary
!
ip nat inside source static 10.11.4.242 160.12.0.1 
ip nat inside source static 10.11.4.243 160.12.0.2 
ip classless
ip route 0.0.0.0 0.0.0.0 195.9.16.17 
!
ip flow-export version 9
!
line con 0
 password 7 0822455D0A16
 login
!
line aux 0
!
line vty 0 4
 password 7 0822455D0A16
 login
line vty 5 15
 password 7 0822455D0A16
 login
!
end
KL_ISP Config:
KLISP#sh run
Building configuration...

Current configuration : 877 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname KLISP
!
no ip cef
no ipv6 cef
!
username KLRTR password 0 cisco
!
no ip domain-lookup
!
spanning-tree mode pvst
!
interface FastEthernet0/0
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface FastEthernet0/1
 ip address 154.10.12.49 255.255.255.240
 duplex auto
 speed auto
!
interface Serial0/0/0
 ip address 195.9.16.17 255.255.255.252
 encapsulation ppp
 ppp authentication chap
 clock rate 2000000
!
interface Serial0/0/1
 no ip address
 clock rate 2000000
 shutdown
!
interface Vlan1
 no ip address
 shutdown
!
ip classless
ip route 10.11.0.0 255.255.0.0 Serial0/0/0 
!
ip flow-export version 9
!
no cdp run
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
end

Be First to Comment

Leave a Reply

%d bloggers like this: